SIEM

Create a SIEM destination

Creates a SIEM destination for the workspace. Credentials are write-only and are never returned.

Required scope: siem:write

post/siem/destinations

Request

  • Base URL: http://localhost:8000
  • URL: http://localhost:8000/siem/destinations
  • Auth: API key in header API-Key

Headers

API-Version'2026-06-01.beta' required

Request body

namestring required
enabledboolean
type'syslog' | 's3' | 'http' required

External SIEM destination type.

Example request

{
  "source": {
    "realms": [
      "customer-portal"
    ]
  }
}

Response

The request has succeeded and a new resource has been created as a result.

idstring uuid required
namestring required
enabledboolean required
type'syslog' | 's3' | 'http' required

External SIEM destination type.

health_status'healthy' | 'degraded' | 'failed' required
failure_countinteger required
last_errorstring
last_sent_atstring date-time
total_events_sentinteger required
total_logs_sentinteger required
total_bytes_sentinteger required
created_atstring date-time required
updated_atstring date-time required

Example response

{
  "source": {
    "realms": [
      "customer-portal"
    ]
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.